This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/YGpB4J28Bf5NHoYTSr4mFJQaBlA.roa File: YGpB4J28Bf5NHoYTSr4mFJQaBlA.roa (raw, json) Hash identifier: 3JFwMa2Ti1yTw1Xq6RCOz5frDtvKldeHr5rO5JZfbrM= Subject key identifier: 60:6A:41:E0:9D:BC:05:FE:4D:1E:86:13:4A:BE:26:14:94:1A:06:50 Certificate issuer: /CN=131881732a3e245a959bc679e0458c39f893e46b Certificate serial: 019B79106F5987986A3306149AA5B3DA5CF8 Authority key identifier: 13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/YGpB4J28Bf5NHoYTSr4mFJQaBlA.roa Signing time: Thu 01 Jan 2026 10:17:58 +0000 ROA not before: Thu 01 Jan 2026 10:17:58 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 47516 IP address blocks: 5.178.111.0/24 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.mft rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 07:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:6f:59:87:98:6a:33:06:14:9a:a5:b3:da:5c:f8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=131881732a3e245a959bc679e0458c39f893e46b Validity Not Before: Jan 1 10:17:58 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=606a41e09dbc05fe4d1e86134abe2614941a0650 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c0:7b:9c:b7:64:80:7e:94:5e:65:ef:ca:25:f4: f7:16:b8:7b:f2:1e:42:2b:88:bc:9c:bc:57:21:f2: 4c:02:ef:7c:d6:ff:e2:8b:7d:b4:5c:ac:93:c6:af: 50:f0:71:50:05:00:80:99:31:3e:37:65:93:fb:f5: 1f:8a:16:4e:85:92:0c:0d:a9:f5:f6:53:f0:26:6b: 5c:8d:ab:92:45:42:37:c2:27:aa:14:a8:45:6a:f1: 16:08:ff:88:dc:45:96:bd:46:f4:ea:15:7f:a9:c8: fd:86:f6:02:a5:fb:a3:1e:9a:73:1f:42:35:2c:2d: 9c:23:65:46:93:2c:92:5e:58:ee:f8:21:b0:1f:13: 0a:60:96:4d:40:3e:0b:f2:bf:0c:ce:53:df:b2:0f: 2a:3e:55:cb:ae:96:69:36:af:12:d4:ce:94:81:cf: c0:d4:9b:ac:ec:b3:b9:c8:56:4c:f1:7a:82:d4:38: 9f:d7:90:26:c0:ac:04:04:32:b2:35:e0:24:de:6c: eb:04:96:87:d4:4b:82:b1:6f:db:4b:6f:6d:06:d1: 53:ba:a1:9b:4f:1d:3c:d8:f1:b0:fb:bf:c3:d8:6a: 98:e8:43:6c:3b:1e:e4:07:5f:7a:bf:fe:41:8f:f5: a5:23:76:45:15:9e:0d:f8:bf:11:cd:ee:69:f8:18: 8a:25 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 60:6A:41:E0:9D:BC:05:FE:4D:1E:86:13:4A:BE:26:14:94:1A:06:50 X509v3 Authority Key Identifier: keyid:13:18:81:73:2A:3E:24:5A:95:9B:C6:79:E0:45:8C:39:F8:93:E4:6B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/YGpB4J28Bf5NHoYTSr4mFJQaBlA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/89f071-5631-45db-a7e5-cd6152261c6f/1/ExiBcyo-JFqVm8Z54EWMOfiT5Gs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.178.111.0/24 Signature Algorithm: sha256WithRSAEncryption 6b:e4:52:07:e8:89:5c:2a:17:f0:8c:98:22:9a:10:69:da:a2: e4:6b:f4:f8:c7:2e:ea:9e:ce:b8:eb:fe:6b:d8:da:cb:7f:7f: e4:f2:c5:bd:68:40:3f:a6:b6:e0:0a:21:f7:a0:55:ca:b1:90: ec:51:a4:02:08:ce:91:cc:2e:5b:89:30:09:f9:06:1f:db:f4: 1b:01:4f:dd:bb:3f:4e:3b:47:14:f5:64:da:4a:2b:15:76:fd: 0b:71:5e:39:b5:f3:cd:10:5b:52:e6:b3:e8:ce:70:f6:0c:ed: a1:85:92:0d:cb:fd:91:ff:18:bd:d5:ad:0b:dc:69:59:9e:82: 0b:cd:50:25:10:e6:c4:e4:53:54:bb:07:50:a2:15:3a:67:53: 68:20:11:36:bc:ab:f6:38:f1:7a:90:aa:57:7d:0f:15:13:18: 6f:34:09:37:e6:bd:1a:9a:bb:40:be:d9:ab:1f:f3:af:cc:51: 90:9e:f0:fa:d3:79:67:69:69:4b:27:a3:5b:fd:19:73:b7:c1: 16:50:ad:f5:71:77:c5:17:3b:11:49:bb:c1:7c:c0:82:9b:7e: 58:a5:4f:b3:ba:10:f0:98:ad:7e:e1:ec:b6:2c:cd:b1:59:34: ee:66:0f:12:25:7e:d4:04:72:c6:7e:df:6b:a5:1d:bc:55:ed: 06:75:da:23 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt5EG9Zh5hqMwYUmqWz2lz4MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDEzMTg4MTczMmEzZTI0NWE5NTliYzY3OWUwNDU4YzM5Zjg5 M2U0NmIwHhcNMjYwMTAxMTAxNzU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg2MDZhNDFlMDlkYmMwNWZlNGQxZTg2MTM0YWJlMjYxNDk0MWEwNjUwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHuct2SAfpReZe/KJfT3Frh78h5C K4i8nLxXIfJMAu981v/ii320XKyTxq9Q8HFQBQCAmTE+N2WT+/UfihZOhZIMDan1 9lPwJmtcjauSRUI3wieqFKhFavEWCP+I3EWWvUb06hV/qcj9hvYCpfujHppzH0I1 LC2cI2VGkyySXlju+CGwHxMKYJZNQD4L8r8MzlPfsg8qPlXLrpZpNq8S1M6Ugc/A 1Jus7LO5yFZM8XqC1Dif15AmwKwEBDKyNeAk3mzrBJaH1EuCsW/bS29tBtFTuqGb Tx082PGw+7/D2GqY6ENsOx7kB196v/5Bj/WlI3ZFFZ4N+L8Rze5p+BiKJQIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFGBqQeCdvAX+TR6GE0q+JhSUGgZQMB8GA1UdIwQY MBaAFBMYgXMqPiRalZvGeeBFjDn4k+RrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUt Y2Q2MTUyMjYxYzZmLzEvWUdwQjRKMjhCZjVOSG9ZVFNyNG1GSlFhQmxBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8yYS84OWYwNzEtNTYzMS00NWRiLWE3ZTUtY2Q2MTUyMjYxYzZm LzEvRXhpQmN5by1KRnFWbThaNTRFV01PZmlUNUdzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbJvMA0G CSqGSIb3DQEBCwUAA4IBAQBr5FIH6IlcKhfwjJgimhBp2qLka/T4xy7qns646/5r 2NrLf3/k8sW9aEA/prbgCiH3oFXKsZDsUaQCCM6RzC5biTAJ+QYf2/QbAU/duz9O O0cU9WTaSisVdv0LcV45tfPNEFtS5rPoznD2DO2hhZINy/2R/xi91a0L3GlZnoIL zVAlEObE5FNUuwdQohU6Z1NoIBE2vKv2OPF6kKpXfQ8VExhvNAk35r0amrtAvtmr H/OvzFGQnvD603lnaWlLJ6Nb/Rlzt8EWUK31cXfFFzsRSbvBfMCCm35YpU+zuhDw mK1+4ey2LM2xWTTuZg8SJX7UBHLGft9rpR28Ve0Gddoj -----END CERTIFICATE-----Generated at Sun Jan 25 13:02:17 2026 by rpki-client